[MEDIUM] TYPO3-CORE-SA-2021-004: Cross-Site Scripting in Form Framework

PKSA-mzcd-fpv2-vf7h CVE-2021-21358 GHSA-x79j-wgqv-g8h2

Affected package: typo3/cms

Affected version: >=10.0.0,<10.4.14|>=11.0.0,<11.1.1

Reported by:
GitHub, FriendsOfPHP/security-advisories